DeutschShown in its original language — a full translation is planned for a future version.
Gitea: Mehrere Schwachstellen
view advisory published 2026-08-16
Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Berechtigungen zu erweitern, Benutzerkonten zu übernehmen, vertrauliche Informationen offenzulegen oder beliebigen Code als Gitea-Dienstbenutzer auszuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-73814US | — | — | ||
Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effecti… | ||||
| CVE-2026-73804US | —OT elevated | — | ||
Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key au… | ||||
| CVE-2026-73800US | — | — | ||
Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event. A fork author can modify a referenc… | ||||
| CVE-2026-73539US | — | — | ||
Gitea substitutes a URL derived from the markup Context field into external renderer command templates without escaping the reference path before shell-style argument splitting. A… | ||||
| CVE-2026-73535US | — | — | ||
Gitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an OpenID identifier. When O… | ||||
| CVE-2026-60008US | — | — | ||
Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in the main docu… | ||||
| CVE-2026-73278US | — | — | ||
Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate throu… | ||||
02
references
External citations — patches, advisories, analysis.
- Gitea 1.27.2 release vom 2026-08-16external
- GitHub Security Advisory GHSA-579w-82gf-89m2 vom 2026-08-16external
- GitHub Security Advisory GHSA-7452-653r-6gp8 vom 2026-08-16external
- GitHub Security Advisory GHSA-8xjr-x7rg-hp5h vom 2026-08-16external
- GitHub Security Advisory GHSA-92j2-6qcg-c28c vom 2026-08-16external
- GitHub Security Advisory GHSA-h62v-wmrr-5qjq vom 2026-08-16external
- GitHub Security Advisory GHSA-q55v-4cmj-xh65 vom 2026-08-16external
- GitHub Security Advisory GHSA-r9ch-mqjm-g67v vom 2026-08-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan